Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: nGaa7gop4FcdIdCJyJdd5R+aGoOREbCSPA7mKUvoaoQ=
Subject key identifier: F4:E7:68:26:52:F6:E3:46:5E:48:3F:1B:B8:FF:50:9E:C5:7C:E8:89
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 01A0E36243938F15CAAEFBCBC06EF790EC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0D56
Signing time: Sun 27 Sep 2026 15:01:02 +0000
Manifest this update: Sun 27 Sep 2026 15:01:02 +0000
Manifest next update: Mon 28 Sep 2026 15:01:02 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: Yvci9VcQDhNUdWl5swlFbcBHSMdbHLBpibTlD7mnYVI=)
2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:43:93:8f:15:ca:ae:fb:cb:c0:6e:f7:90:ec:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Sep 27 15:01:02 2026 GMT
Not After : Sep 28 15:01:02 2026 GMT
Subject: CN=f4e7682652f6e3465e483f1bb8ff509ec57ce889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:74:ee:1e:39:c2:3d:67:56:76:42:4a:ea:6a:
81:fc:87:02:5a:09:63:21:6d:e4:b1:1b:1b:b4:13:
d4:24:90:36:04:d5:3b:2e:f2:17:3f:2a:99:3b:e5:
58:77:53:12:81:1d:2b:21:5c:81:11:3f:61:7e:e0:
fd:9f:b8:58:bd:5e:8d:7e:a8:c0:3c:ad:79:a2:cf:
a4:9e:c2:99:bc:c9:7e:f0:3a:fb:04:3d:2a:75:fc:
28:34:d9:17:52:2d:e6:8c:51:7d:84:a6:c8:ce:a5:
91:2d:0d:e6:09:d0:62:31:9f:3e:95:17:cd:9d:d2:
ca:c7:cf:e0:2a:a2:a4:06:d1:88:d3:2f:f4:f5:2e:
97:39:68:3d:cb:c1:91:73:72:a8:1c:62:26:51:ae:
a7:c7:46:56:87:53:19:c9:b5:75:bf:42:c4:61:21:
cc:b3:19:44:45:2b:86:5c:f9:94:3e:64:51:8b:1c:
34:d2:02:85:14:51:7d:e5:c1:48:f0:45:e8:2e:25:
53:bd:31:96:77:6a:2e:e9:b9:74:38:8d:5a:7c:0a:
1a:62:04:1c:a1:83:6b:92:30:12:f7:c3:95:0e:b2:
b3:f1:6a:17:7f:3e:7d:43:6b:5a:9a:f2:e2:a1:60:
4d:6f:7b:ab:f1:3c:c7:1b:fe:92:d0:64:0e:86:af:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E7:68:26:52:F6:E3:46:5E:48:3F:1B:B8:FF:50:9E:C5:7C:E8:89
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:15:05:d6:25:03:db:de:e8:7d:65:c4:bc:fd:ee:02:2c:d1:
c9:86:c3:bd:c0:2c:0c:eb:34:40:2b:da:e6:5b:0e:f5:72:31:
fd:f4:bd:89:c0:7e:65:2b:13:28:39:42:03:24:41:00:30:34:
45:26:c4:a0:fb:4c:1b:40:4a:96:22:69:2e:a8:c7:7a:88:b1:
fd:61:2d:81:b4:b2:89:fc:49:3e:89:e4:07:e6:fb:df:b1:a4:
b3:e3:ce:2d:ca:69:8e:98:82:be:64:61:d7:fe:67:73:a7:b8:
81:14:d0:c3:03:b9:41:b5:e7:7d:9f:d7:cc:16:cd:8c:0c:67:
b5:8d:9c:e0:f6:47:fd:8b:0f:79:af:ad:ec:39:63:e6:d8:8a:
5b:9f:61:0c:f4:fd:59:df:e8:64:38:6a:f0:ad:88:3d:23:a6:
a8:2c:5f:9e:7c:08:39:95:27:19:a6:08:67:4c:6a:20:64:1f:
ed:d3:10:53:4c:0b:d6:35:3d:cb:f6:91:b8:fd:8b:53:a2:47:
30:90:4d:b9:36:66:37:9b:48:b3:96:59:c4:4a:2f:7b:61:94:
79:df:fd:3f:07:7c:92:ad:28:d7:a4:49:f0:90:90:50:11:82:
6e:d0:5b:f2:49:7c:48:26:b1:98:5b:6f:01:15:4c:e6:43:f2:
d9:47:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:45:33 2026 by rpki-client